github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #3554] mpv: lua plugins cannot load shared libraries #2230

New issue

Closed

opened 2026-05-05 08:55:24 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 08:55:24 -06:00

Owner

Originally created by @hyiltiz on GitHub (Jul 27, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3554

See https://github.com/open-dynaMIX/simple-mpv-webui/issues/106 for more detail.

Bug and expected behavior

Please see above link.

No profile or disabling firejail

What changed calling firejail --noprofile PROGRAM in a shell? Works.
What changed calling the program by path=without firejail (check whereis PROGRAM, firejail --list, stat $programpath)? Works.

Reproduce
Steps to reproduce the behavior:

Run in bash firejail mpv a.mp3
See error ERROR (see above link).
Run /usr/bin/mpv a.mp3 so it works.

Environment

Linux distribution and version (ie output of lsb_release -a) See above link.
Firejail version (output of firejail --version) exclusive or used git commit (git rev-parse HEAD)

firejail version 0.9.62

Compile time support:
        - AppArmor support is enabled
        - AppImage support is enabled
        - chroot support is enabled
        - file and directory whitelisting support is enabled
        - file transfer support is enabled
        - firetunnel support is enabled
        - networking support is enabled
        - overlayfs support is enabled
        - private-home support is enabled
        - seccomp-bpf support is enabled
        - user namespace support is enabled
        - X11 sandboxing support is enabled

What other programs interact with the affected program for the functionality? Mpv and lua libraries.
Are these listed in the profile? Mpv profile: https://termbin.com/7cye

Additional context
Other context about the problem like related errors to understand the problem.

Checklist

The upstream profile (and redirect profile if exists) have no changes fixing it.
The upstream profile exists (find / -name 'firejail' 2>/dev/null/fd firejail to locate profiles ie in /usr/local/etc/firejail/PROGRAM.profile)
Programs needed for interaction are listed.
Error was checked in search engine and on issue list without success.

debug output

OUTPUT OF `firejail --debug PROGRAM`
This scraps way too much information that are tangential to the issue at hand. Reserving for privacy reasons.

Originally created by @hyiltiz on GitHub (Jul 27, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3554 See https://github.com/open-dynaMIX/simple-mpv-webui/issues/106 for more detail. **Bug and expected behavior** - Please see above link. **No profile or disabling firejail** - What changed calling `firejail --noprofile PROGRAM` in a shell? Works. - What changed calling the program *by path*=without firejail (check `whereis PROGRAM`, `firejail --list`, `stat $programpath`)? Works. **Reproduce** Steps to reproduce the behavior: 1. Run in bash `firejail mpv a.mp3` 2. See error `ERROR` (see above link). 3. Run `/usr/bin/mpv a.mp3` so it works. **Environment** - Linux distribution and version (ie output of `lsb_release -a`) See above link. - Firejail version (output of `firejail --version`) exclusive or used git commit (`git rev-parse HEAD`) ``` firejail version 0.9.62 Compile time support: - AppArmor support is enabled - AppImage support is enabled - chroot support is enabled - file and directory whitelisting support is enabled - file transfer support is enabled - firetunnel support is enabled - networking support is enabled - overlayfs support is enabled - private-home support is enabled - seccomp-bpf support is enabled - user namespace support is enabled - X11 sandboxing support is enabled ``` - What other programs interact with the affected program for the functionality? Mpv and lua libraries. - Are these listed in the profile? Mpv profile: https://termbin.com/7cye **Additional context** Other context about the problem like related errors to understand the problem. **Checklist** - [X] The upstream profile (and redirect profile if exists) have no changes fixing it. - [X] The upstream profile exists (`find / -name 'firejail' 2>/dev/null`/`fd firejail` to locate profiles ie in `/usr/local/etc/firejail/PROGRAM.profile`) - [X] Programs needed for interaction are listed. - [X] Error was checked in search engine and on issue list without success. <details><summary> debug output </summary> ``` OUTPUT OF `firejail --debug PROGRAM` This scraps way too much information that are tangential to the issue at hand. Reserving for privacy reasons. ``` </details>

gitea-mirror closed this issue

2026-05-05 08:55:25 -06:00

gitea-mirror commented

2026-05-05 08:55:27 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jul 27, 2020):

Can you try firejail --whitelist=/usr/share/lua /usr/bin/mpv foo.mp3.

@rusty-snake commented on GitHub (Jul 27, 2020): Can you try `firejail --whitelist=/usr/share/lua /usr/bin/mpv foo.mp3`.

gitea-mirror commented

2026-05-05 08:55:28 -06:00

Author

Owner

@hyiltiz commented on GitHub (Jul 27, 2020):

Just tried. Exactly the same error.

@hyiltiz commented on GitHub (Jul 27, 2020): Just tried. Exactly the same error.

gitea-mirror commented

2026-05-05 08:55:30 -06:00

Author

Owner

@ghost commented on GitHub (Jul 27, 2020):

@hyiltiz Compared to our current mpv profile, the version from 0.9.62 that you have blacklists Lua (by including disable-interpreters.inc). I think that's the cause of your issues. You can try adding the below in a mpv.local file and retest:

# Allow lua (blacklisted by disable-interpreters.inc)
include allow-lua.inc

whitelist /usr/share/lua
whitelist /usr/share/lua*
whitelist /usr/share/vulkan

@ghost commented on GitHub (Jul 27, 2020): @hyiltiz Compared to our [current mpv profile](https://raw.githubusercontent.com/netblue30/firejail/master/etc/profile-m-z/mpv.profile), the version from 0.9.62 that you have blacklists Lua (by including disable-interpreters.inc). I think that's the cause of your issues. You can try adding the below in a `mpv.local` file and retest: ``` # Allow lua (blacklisted by disable-interpreters.inc) include allow-lua.inc whitelist /usr/share/lua whitelist /usr/share/lua* whitelist /usr/share/vulkan ```

gitea-mirror commented

2026-05-05 08:55:31 -06:00

Author

Owner

@hyiltiz commented on GitHub (Jul 27, 2020):

Hmm, pasting that to ~/.config/firejail/mpv.local fixed it, thanks!

@hyiltiz commented on GitHub (Jul 27, 2020): Hmm, pasting that to `~/.config/firejail/mpv.local` fixed it, thanks!

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2230

No description provided.

Rows
Columns